Improper access control in a Windows Communication Foundation endpoint within the Local Admin Service allows a local user to raise their privileges to that of a local administrator. By directly communicating with the LocalAdminService.exe named pipe, a user can bypass client‑side group membership checks and gain administrative rights, which compromises system integrity and confidentiality on that device.

The vulnerability affects Edgemo (now Danoffice IT) Local Admin Service 1.2.7.23180 running on Windows operating systems. Systems using this specific version are susceptible if the LocalAdminService.exe component is present.

The CVSS score of 7.1 indicates a high severity of potential impact. However, the EPSS score of less than 1% suggests a very low exploitation probability at present, and the flaw is not listed in the CISA Known Exploited Vulnerabilities catalog. Attackers would need local access to the affected machine and would exploit the named pipe directly, so the vector is local rather than remote.